IN THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

1 . (Currently Amended) A method for rolling a computer resource back to a state 
associated with a computer image comprising: 

determining a roll-back state associated with the computer image; 
determining whether the roll-back state is secure; 

performing one or more remediation actions prior to or during a roll-back of the computer 
resource to the roll-back state if it is det e rmin e d that the roll-back state is not secure; and 

rolling back the computer resource if it is d e termin e d that the roll-back state is secure; 

wherein determining whether the roll-back state is secure comprises scanning data 
comprising the computer image to determine whether the computer resource, if rolled back to the 
roll-back state, would be one or both of: 

vulnerable to a known external attack; and 

in a compromised state as a result of a prior external attack made at a time prior to 
the computer image being generated ; and 

wherein performing one or more remediation actions includes retrieving updated security 
definitions , 

2. (Canceled) 

3. (Previously presented) A method as recited in claim 1 wherein the image is a system 
image. 

4. (Original) A method as recited in claim 1 wherein the image is a file. 

5. (Previously presented) A method as recited in claim 1 wherein the image is an 
application image. 
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6-8. (Canceled) 



9. (Previously presented) A method as recited in claim 1 wherein determining whether the 
roll-back-state is secure includes evaluating a security definition in a repository providing data to 
the roll-back state. 

10. (Previously presented) A method as recited in claim 9 wherein determining whether the 
roll-back-state is secure includes determining whether the definition is updated. 

1 1 . (Previously presented) A method as recited in claim 1 0 wherein determining whether the 
roll-back-state is secure includes retrieving an updated definition if the definition is not updated. 

12. (Previously Presented) A method as recited in claim 1 1 wherein determining whether 
the roll-back-state is secure includes installing the updated definition if the definition is not 
updated. 

13. (Previously Presented) A method as recited in claim 1 wherein performing one or more 
remediation actions includes: 

displaying a message; and 
receiving a user input. 

14-25. (Canceled) 

26. (Currently Amended) A computer program product for rolling a computer resource back 
to a state associated with a computer image, the computer program product being embodied in a 
tangibl e computer readable storage medium and comprising computer instructions for: 

determining a roll-back state associated with the computer image; 

determining whether the roll-back state is secure; 

performing one or more remediation actions prior to or during a roll-back of the computer 
resource to the roll-back state if it is d e t e rmin e d that the roll-back state is not secure; and 

rolling back the computer resource if it is d e t e rmin e d that the roll-back state is secure; 
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wherein determining whether the roll-back state is secure comprises scanning data 
comprising the computer image to determine whether the computer resource, if rolled back to the 
roll-back state, would be one or both of: 

vulnerable to a known external attack; and 

in a compromised state as a result of a prior external attack made at a time prior to 
the computer image being generated ; and 

wherein performing one or more remediation actions includes retrieving updated security 
definitions . 

27-29. (Canceled) 

30. (Previously Presented) A method as recited in claim 1 wherein performing one or more 
remediation actions includes displaying a warning to a user. 

3 1 . (Previously Presented) A method as recited in claim 1 wherein performing one or more 
remediation actions includes stopping the roll-back during the roll-back of the computer 
resource. 

32. (Previously Presented) A method as recited in claim 1 wherein the remediation actions 
may be configured by a user, system/network administrator, or other person. 

33. (Canceled) 

34. (Currently Amended) A system for rolling a computer resource back to a state associated 
with a computer image comprising: 

a processor; and 

a memory coupled with the processor, wherein the memory is configured to provide the 
processor with instructions which when executed cause the processor to: 

determine a roll-back state associated with the computer image; 
determine whether the roll-back state is secure; 
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perform one or more remediation actions prior to or during a roll-back of the 
computer resource to the roll-back state if it is d e termin e d that the roll-back state is not secure; 
and 

roll back the computer resource if it is d e t e rmin e d that the roll-back state is secure; 

wherein determining whether the roll-back state is secure comprises scanning data 
comprising the computer image to determine whether the computer resource, if rolled back to the 
roll-back state, would be one or both of: 

vulnerable to a known external attack; and 

in a compromised state as a result of a prior external attack made at a time prior to 
the computer image being generated ; and 

wherein performing one or more remediation actions includes retrieving updated security 
definitions . 

35. (Previously Presented) A system as recited in claim 34 wherein the image is a file. 

36. (Previously Presented) A system as recited in claim 34 wherein the image is an 
application image. 

37. (Previously Presented) A system as recited in claim 34 wherein determining whether the 
roll-back-state is secure includes evaluating a security definition in a repository providing data to 
the roll-back state. 

38. (Previously Presented) A system as recited in claim 37 wherein determining whether the 
roll-back-state is secure includes determining whether the definition is updated. 

39. (Previously Presented) A system as recited in claim 38 wherein determining whether the 
roll-back-state is secure includes retrieving an updated definition if the definition is not updated. 

40. (Previously Presented) A system as recited in claim 39 wherein determining whether the 
roll-back-state is secure includes installing the updated definition if the definition is not updated. 
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41 . (Previously Presented) A system as recited in claim 34 wherein performing one or more 
remediation actions includes: 

displaying a message; and 
receiving a user input. 

42. (Previously Presented) A system as recited in claim 34 wherein performing one or more 
remediation actions includes displaying a warning to a user. 

43. (Previously Presented) A system as recited in claim 34 wherein performing one or more 
remediation actions includes stopping the roll-back during the roll-back of the computer. 

44. (Previously Presented) A system as recited in claim 34 wherein the remediation actions 
may be configured by a user, system/network administrator, or other person. 

45. (Previously Presented) A system as recited in claim 34 wherein performing one or more 
remediation actions includes retrieving updated security definitions. 

46. (Previously Presented) A system as recited in claim 34 wherein the image is a system 
image. 
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